The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-backup | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-libsUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-s3-engineUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-configUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-server-galera | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-backupUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-connect-engineUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-develUpgrade mariadb105-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105 | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mysql-selinuxUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-devel | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadbUpgrade galeraUpgrade mariadb-develUpgrade mariadb-backupUpgrade mysql-selinuxUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-common | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-errmsgNo solution existsUpgrade mariadb-backup-debuginfoUpgrade mysql-selinuxUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-test | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfo | Mar 12, 2024 | May 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub